Blog

Notes from the ops room.

Hosting, infrastructure, development, and SEO — written by the people doing the work.

Latest Sep 17, 2026 Security

CVE-2026-76461: Cisco’s Email Security Box Gets Rooted by Email

A CVSS 9.8 zero-day in Cisco AsyncOS lets an unauthenticated attacker send one crafted email message and walk away with root on the appliance meant to protect your inbox. Active exploitation was confirmed before Cisco even knew the flaw exi...

Read article

Sep 16, 2026 Security

LiteSpeed Enterprise's Root Access Flaw: One Tenant Can Own the Whole Server

cPanel's September 14 advisory warns that any website user on a shared LiteSpeed server can bypass CageFS and reach root...

Read article

Sep 15, 2026 Artificial Intelligence

The AI Slowdown Pact: What 'Pace the Frontier' Actually Means

On September 12, Anthropic's CEO published a 3,800-word call for deliberately slowing AI capability gains — and within h...

Read article

Sep 14, 2026 Security

CVE-2026-85706: One HTTP Request Reads Your GitLab Secrets

GitLab's CVSS 10.0 path traversal flaw hit CISA's KEV catalog within 24 hours of the September 10 patch — and active exp...

Read article

Notes from the ops room.

CVE-2026-76461: Cisco’s Email Security Box Gets Rooted by Email

More articles

LiteSpeed Enterprise's Root Access Flaw: One Tenant Can Own the Whole Server

The AI Slowdown Pact: What 'Pace the Frontier' Actually Means

CVE-2026-85706: One HTTP Request Reads Your GitLab Secrets

More from the blog

CVSS 9.9: cPanel's EmailTrack Flaw Puts Every Shared Hosting Tenant at Risk

GitSpawn: The .git Config Trick That Hijacks AI Coding Agents

BlueMoon: Nation-State Hackers Chain Three CVEs Through Chrome

CVE-2026-86218: When Your MSP's RMM Tool Becomes the Attack Vector

Record Patch Tuesday: 974 CVEs, Two Active Zero-Days, a Wormable DNS RCE

MikroTrick: Two Chained SSH CVEs Are Hijacking MikroTik Routers Across 122,500 Exposed Networks

StyleSmuggler: Magento Zero-Day Under Active Attack — No Patch Yet

CVE-2026-19949: Your Backup Plugin Is Now an Attack Vector for 3.2 Million Sites

SonicWall SMA1000's Third Zero-Day Chain: Patch Now — Then Check What July Left Behind

GPT-6 Astra: OpenAI Ships Its First Critical-Rated Cybersecurity AI